{"vulnerability": "2015-73", "sightings": [{"uuid": "5dd85341-84d9-4c08-acbb-d76673a9f75c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2015-7387", "type": "exploited", "source": "https://www.exploit-db.com/exploits/38352", "content": "", "creation_timestamp": "2015-09-29T00:00:00.000000Z"}, {"uuid": "85c9bfa7-e31c-4746-9fee-91940f9e3ae4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2015-7309", "type": "exploited", "source": "https://www.exploit-db.com/exploits/38196", "content": "", "creation_timestamp": "2015-09-15T00:00:00.000000Z"}, {"uuid": "c975c2f5-1227-4521-9654-e15aef997465", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2015-7358", "type": "exploited", "source": "https://www.exploit-db.com/exploits/38403", "content": "", "creation_timestamp": "2015-10-05T00:00:00.000000Z"}, {"uuid": "ab4b1703-fb10-4291-b496-0fd71853a7df", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2015-7387", "type": "exploited", "source": "https://www.exploit-db.com/exploits/38173", "content": "", "creation_timestamp": "2015-09-14T00:00:00.000000Z"}, {"uuid": "53329cd3-ac7e-4a2e-97c3-da9aacec6d20", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2015-7309", "type": "seen", "source": "MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd", "content": "", "creation_timestamp": "2025-02-06T03:13:42.000000Z"}, {"uuid": "4c23cb2d-1fa7-4a3d-a4d9-f456dacb076d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2015-7387", "type": "seen", "source": "MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd", "content": "", "creation_timestamp": "2025-02-06T03:13:42.000000Z"}, {"uuid": "deac778c-7fa7-4cd7-a655-88681a5915b6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2015-7309", "type": "seen", "source": "MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd", "content": "", "creation_timestamp": "2025-02-23T04:09:42.000000Z"}, {"uuid": "9d226539-00fd-4e7d-b8dd-029094315b6b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2015-7387", "type": "seen", "source": "MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd", "content": "", "creation_timestamp": "2025-02-23T04:09:42.000000Z"}, {"uuid": "a30fdf31-5cea-4995-a22d-520ab1dfcef8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2015-7377", "type": "seen", "source": "MISP/af790da0-9e28-4cb7-bd4e-46ad005115c6", "content": "", "creation_timestamp": "2025-10-08T21:59:26.000000Z"}, {"uuid": "3e2df821-bd8c-4431-b1a9-1cb7bf3f5269", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2015-7387", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/misc/manageengine_eventlog_analyzer_rce.rb", "content": "", "creation_timestamp": "2018-05-29T15:50:33.000000Z"}, {"uuid": "06e3428c-4f0d-4139-8dd4-40ea545a3af1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2015-7309", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/bolt_file_upload.rb", "content": "", "creation_timestamp": "2018-05-29T15:50:33.000000Z"}, {"uuid": "98f664c9-aad9-4048-80f0-67d767b19e27", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2015-7377", "type": "seen", "source": "MISP/af790da0-9e28-4cb7-bd4e-46ad005115c6", "content": "", "creation_timestamp": "2025-10-01T18:11:56.000000Z"}, {"uuid": "0df1baa9-b6b8-4621-9b05-37b64e731931", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "db99543d-496c-4eef-ad0a-2df2093364df", "vulnerability": "CVE-2015-7347", "type": "confirmed", "source": "https://www.exploit-db.com/exploits/37272", "content": "", "creation_timestamp": "2015-06-12T00:00:00.000000Z"}, {"uuid": "09333f68-4d26-47fb-9017-8829e5c2d87f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "db99543d-496c-4eef-ad0a-2df2093364df", "vulnerability": "CVE-2015-7346", "type": "confirmed", "source": "https://www.exploit-db.com/exploits/37272", "content": "", "creation_timestamp": "2015-06-12T00:00:00.000000Z"}, {"uuid": "210706f9-e0c1-4992-b646-5dc27a565a23", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2015-7377", "type": "published-proof-of-concept", "source": "https://t.me/hatexe/1948", "content": "CVE-2015-7377 - reflected Xss - wordpress - pie register WordPress plugin 2.0.18 \ud83d\udd2a\n\nPoc:\n https://localhost/wordpress/?page=pie-register&show_dash_widget=1&invitaion_code=PHNJcmlwdD5hbGVydCgxKTwvc2NyaXB0Pg==\n\n#poc #cve #xss", "creation_timestamp": "2024-10-12T22:01:11.000000Z"}, {"uuid": "e65112b9-f0a5-45c3-a5a5-26f95b261902", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2015-7377", "type": "published-proof-of-concept", "source": "https://t.me/Root_Exploit/811", "content": "CVE-2015-7377 - reflected Xss - wordpress - pie register WordPress plugin 2.0.18 \ud83d\udd2a\n\nPoc:\n https://localhost/wordpress/?page=pie-register&show_dash_widget=1&invitaion_code=PHNJcmlwdD5hbGVydCgxKTwvc2NyaXB0Pg==\n\n#poc #cve #xss\n\nJoin RootExploit \ud83d\udc8e", "creation_timestamp": "2024-10-09T12:19:18.000000Z"}, {"uuid": "a0f46b01-600b-4ec6-a38d-f646502a5684", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2015-7326", "type": "seen", "source": "https://t.me/informationsec/185", "content": "\u062c\u062f\u06cc\u062f \u062a\u0631\u06cc\u0646 \u0631\u062e\u062f\u0627\u062f\u0647\u0627\u06cc \u0627\u0645\u0646\u06cc\u062a\u06cc (\u0628\u0631\u0648\u0632 \u0631\u0633\u0627\u0646\u06cc\u060c \u0628\u0627\u06af \u0648 \u0622\u0633\u06cc\u0628 \u067e\u0630\u06cc\u0631\u06cc) \u062f\u0631 \u0633\u0647 \u0631\u0648\u0632 \u06af\u0630\u0634\u062a\u0647 \u0622\u0631\u0634\u06cc\u0648 securityfocus\n\n[security bulletin] HPSBGN03429 rev.2 - HP Arcsight Logger, Remote Disclosure of Information 2015-11-03\n\n[security bulletin] HPSBGN03425 rev.1 - HP ArcSight SmartConnectors, Remote Disclosure of Information, Local Escalation of Privilege 2015-11-03\n\n[security bulletin] HPSBGN03430 rev.1 - HP ArcSight products, Local Elevation of Privilege 2015-11-03\n\n[SECURITY] [DSA 3391-1] php-horde security update 2015-11-03\n\n[security bulletin] HPSBGN03386 rev.2 - HP Central View Fraud Risk Management, Revenue Leakage Control, Dealer Performance Audit, Credit Risk Control, Roaming Fraud Control, Subscription Fraud Prevention, Remote Disclosure of Information, Local Disclosure 2015-11-03\n\n[security bulletin] HPSBGN03426 rev.1 - HP Mobility Software, Remote Execution of Arbitrary Code 2015-11-02\n\n[SECURITY] [DSA 3355-2] libvdpau regression update 2015-11-02 \n\n[security bulletin] HPSBMU03518 rev.1 - HP Vertica, Remote Code Execution 2015-11-02\n\n[SECURITY] [DSA 3390-1] xen security update 2015-11-02\n\nCVE-2015-7326 (XXE vulnerability in Milton Webdav) 2015-11-02\n\nAccentis Content Resource Management System - XSS 2015-11-02\n\nAccentis Content Resource Management System - SQL 2015-11-02\n\nCross-Site Scripting | Zeuscart V4 2015-11-02\n\n[SECURITY] [DSA 3389-1] elasticsearch end-of-life 2015-11-01\n\n[SECURITY] [DSA 3381-2] openjdk-7 security update 2015-11-01\n\n[SECURITY] [DSA 3388-1] ntp security update 2015-11-01\n\n[SECURITY] [DSA 3387-1] openafs security update 2015-11-01\n\nTCPing 2.1.0 Buffer Overflow 2015-11-01\n\n\n#\u0631\u062e\u062f\u0627\u062f #\u062e\u0628\u0631\n\n\u0645\u0646\u0628\u0639\nhttp://www.securityfocus.com/archive/1", "creation_timestamp": "2026-08-03T02:17:47.697731Z"}, {"uuid": "93099b6b-cc3c-44c8-a45c-d9d6b6b3ba83", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2015-7340", "type": "seen", "source": "https://t.me/cibsecurity/10386", "content": "ATENTION\u203c New - CVE-2015-7340\n\nJEvents Joomla Component before 3.4.0 RC6 has SQL Injection via evid in a Manage Events action.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2020-03-09T20:13:18.000000Z"}, {"uuid": "649bfc53-e200-45c3-ae9b-d7cab5a77ed7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2015-7339", "type": "seen", "source": "https://t.me/cibsecurity/10387", "content": "ATENTION\u203c New - CVE-2015-7339\n\nJCE Joomla Component 2.5.0 to 2.5.2 allows arbitrary file upload via a .php file extension for an image file to the /com_jce/editor/libraries/classes/browser.php script.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2020-03-09T20:13:19.000000Z"}, {"uuid": "3bc63f25-1b32-4679-9f63-7a6577bf18f8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2015-7338", "type": "seen", "source": "https://t.me/cibsecurity/10388", "content": "ATENTION\u203c New - CVE-2015-7338\n\nSQL Injection exists in AcyMailing Joomla Component before 4.9.5 via exportgeolocorder in a geolocation_longitude request to index.php.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2020-03-09T20:13:20.000000Z"}, {"uuid": "d55be6d5-1c5a-4e3f-8721-829d34950369", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2015-7344", "type": "seen", "source": "https://t.me/cibsecurity/10374", "content": "ATENTION\u203c New - CVE-2015-7344\n\nHikaShop Joomla Component before 2.6.0 has XSS via an injected payload[/caption].\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2020-03-09T18:13:10.000000Z"}, {"uuid": "438fed9a-65a7-4091-92e3-6de415043185", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2015-7343", "type": "seen", "source": "https://t.me/cibsecurity/10375", "content": "ATENTION\u203c New - CVE-2015-7343\n\nJNews Joomla Component before 8.5.0 has XSS via the mailingsearch parameter.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2020-03-09T18:13:11.000000Z"}, {"uuid": "f8c87b38-87ba-4c5a-a748-47e358b52328", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2015-7342", "type": "seen", "source": "https://t.me/cibsecurity/10382", "content": "ATENTION\u203c New - CVE-2015-7342\n\nJNews Joomla Component before 8.5.0 allows SQL injection via upload thumbnail, Queue Search Field, Subscribers Search Field, or Newsletters Search Field.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2020-03-09T19:43:25.000000Z"}, {"uuid": "d1ac6acc-eae1-4bfb-8b67-b7ea34d22681", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2015-7341", "type": "seen", "source": "https://t.me/cibsecurity/10385", "content": "ATENTION\u203c New - CVE-2015-7341\n\nJNews Joomla Component before 8.5.0 allows arbitrary File Upload via Subscribers or Templates, as demonstrated by the .php5 extension.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2020-03-09T20:13:17.000000Z"}, {"uuid": "5c1c7faa-5d25-45f9-bf6c-9c008caa3f5e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2015-7336", "type": "seen", "source": "https://t.me/cibsecurity/10789", "content": "ATENTION\u203c New - CVE-2015-7336\n\nMITRE is populating this ID because it was assigned prior to Lenovo becoming a CNA. A vulnerability was reported (fixed and publicly disclosed in 2015) in Lenovo System Update version 5.07.0008 and prior that could allow the signature check of an update to be bypassed.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2020-03-27T17:52:13.000000Z"}, {"uuid": "f485a355-3a28-40c3-86df-221d4d6ee7be", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2015-7335", "type": "seen", "source": "https://t.me/cibsecurity/10790", "content": "ATENTION\u203c New - CVE-2015-7335\n\nMITRE is populating this ID because it was assigned prior to Lenovo becoming a CNA. A race condition was reported (fixed and publicly disclosed in 2015) in Lenovo System Update version 5.07.0008 and prior that could allow a user to execute arbitrary code with elevated privileges.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2020-03-27T17:52:14.000000Z"}, {"uuid": "60c26a91-1050-4952-92a9-1b4416e96b65", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2015-7334", "type": "seen", "source": "https://t.me/cibsecurity/10791", "content": "ATENTION\u203c New - CVE-2015-7334\n\nMITRE is populating this ID because it was assigned prior to Lenovo becoming a CNA. A local privilege escalation vulnerability was reported (fixed and publicly disclosed in 2015) in Lenovo System Update version 5.07.0008 and prior where the SUService.exe /type COMMAND type could allow a user to execute arbitrary code with elevated privileges.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2020-03-27T17:52:15.000000Z"}, {"uuid": "bce40086-7dd6-4464-8116-b831b00cdeed", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2015-7333", "type": "seen", "source": "https://t.me/cibsecurity/10792", "content": "ATENTION\u203c New - CVE-2015-7333\n\nMITRE is populating this ID because it was assigned prior to Lenovo becoming a CNA. A local privilege escalation vulnerability was reported (fixed and publicly disclosed in 2015) in Lenovo System Update version 5.07.0008 and prior where the SUService.exe /type INF and INF_BY_COMPATIBLE_ID command types could allow a user to execute arbitrary code with elevated privileges.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2020-03-27T18:52:27.000000Z"}, {"uuid": "952880c4-ba69-432b-8d9d-1ffd09af42bc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2015-7326", "type": "seen", "source": "https://t.me/informationsec/185", "content": "\u062c\u062f\u06cc\u062f \u062a\u0631\u06cc\u0646 \u0631\u062e\u062f\u0627\u062f\u0647\u0627\u06cc \u0627\u0645\u0646\u06cc\u062a\u06cc (\u0628\u0631\u0648\u0632 \u0631\u0633\u0627\u0646\u06cc\u060c \u0628\u0627\u06af \u0648 \u0622\u0633\u06cc\u0628 \u067e\u0630\u06cc\u0631\u06cc) \u062f\u0631 \u0633\u0647 \u0631\u0648\u0632 \u06af\u0630\u0634\u062a\u0647 \u0622\u0631\u0634\u06cc\u0648 securityfocus\n\n[security bulletin] HPSBGN03429 rev.2 - HP Arcsight Logger, Remote Disclosure of Information 2015-11-03\n\n[security bulletin] HPSBGN03425 rev.1 - HP ArcSight SmartConnectors, Remote Disclosure of Information, Local Escalation of Privilege 2015-11-03\n\n[security bulletin] HPSBGN03430 rev.1 - HP ArcSight products, Local Elevation of Privilege 2015-11-03\n\n[SECURITY] [DSA 3391-1] php-horde security update 2015-11-03\n\n[security bulletin] HPSBGN03386 rev.2 - HP Central View Fraud Risk Management, Revenue Leakage Control, Dealer Performance Audit, Credit Risk Control, Roaming Fraud Control, Subscription Fraud Prevention, Remote Disclosure of Information, Local Disclosure 2015-11-03\n\n[security bulletin] HPSBGN03426 rev.1 - HP Mobility Software, Remote Execution of Arbitrary Code 2015-11-02\n\n[SECURITY] [DSA 3355-2] libvdpau regression update 2015-11-02 \n\n[security bulletin] HPSBMU03518 rev.1 - HP Vertica, Remote Code Execution 2015-11-02\n\n[SECURITY] [DSA 3390-1] xen security update 2015-11-02\n\nCVE-2015-7326 (XXE vulnerability in Milton Webdav) 2015-11-02\n\nAccentis Content Resource Management System - XSS 2015-11-02\n\nAccentis Content Resource Management System - SQL 2015-11-02\n\nCross-Site Scripting | Zeuscart V4 2015-11-02\n\n[SECURITY] [DSA 3389-1] elasticsearch end-of-life 2015-11-01\n\n[SECURITY] [DSA 3381-2] openjdk-7 security update 2015-11-01\n\n[SECURITY] [DSA 3388-1] ntp security update 2015-11-01\n\n[SECURITY] [DSA 3387-1] openafs security update 2015-11-01\n\nTCPing 2.1.0 Buffer Overflow 2015-11-01\n\n\n#\u0631\u062e\u062f\u0627\u062f #\u062e\u0628\u0631\n\n\u0645\u0646\u0628\u0639\nhttp://www.securityfocus.com/archive/1", "creation_timestamp": "2026-08-02T14:45:13.510284Z"}, {"uuid": "9e1a4aac-fd96-458e-92f1-47765e0e730e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2015-7309", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/bolt_file_upload.rb", "content": "{\"aliases\": [], \"arch\": \"php\", \"author\": [\"Tim Coen\", \"Roberto Soares Espreto \"], \"autofilter_ports\": [80, 8080, 443, 8000, 8888, 8880, 8008, 3000, 8443], \"autofilter_services\": [\"http\", \"https\"], \"check\": true, \"default_credential\": false, \"description\": \"Bolt CMS contains a flaw that allows an authenticated remote\\n          attacker to execute arbitrary PHP code. This module was\\n          tested on version 2.2.4.\", \"disclosure_date\": \"2015-08-17\", \"fullname\": \"exploit/multi/http/bolt_file_upload\", \"is_install_path\": true, \"mod_time\": \"2026-04-22 11:57:58 +0000\", \"name\": \"CMS Bolt File Upload Vulnerability\", \"needs_cleanup\": true, \"notes\": {\"Reliability\": [\"unknown-reliability\"], \"SideEffects\": [\"unknown-side-effects\"], \"Stability\": [\"unknown-stability\"]}, \"path\": \"/modules/exploits/multi/http/bolt_file_upload.rb\", \"platform\": \"PHP\", \"post_auth\": true, \"rank\": 600, \"ref_name\": \"multi/http/bolt_file_upload\", \"references\": [\"CVE-2015-7309\", \"URL-http://blog.curesec.com/article/blog/Bolt-224-Code-Execution-44.html\"], \"rport\": 80, \"session_types\": false, \"targets\": [\"Bolt 2.2.4\"], \"type\": \"exploit\"}", "creation_timestamp": "2026-09-08T06:49:42.897258Z"}, {"uuid": "3b9337ee-d08e-49f8-a90e-7de6f367ca7b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2015-7387", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/misc/manageengine_eventlog_analyzer_rce.rb", "content": "{\"aliases\": [], \"arch\": \"x86\", \"author\": [\"xistence \"], \"autofilter_ports\": [80, 8080, 443, 8000, 8888, 8880, 8008, 3000, 8443], \"autofilter_services\": [\"http\", \"https\"], \"check\": true, \"default_credential\": false, \"description\": \"This module exploits a SQL query functionality in ManageEngine EventLog Analyzer v10.6\\n          build 10060 and previous versions. Every authenticated user, including the default \\\"guest\\\"\\n          account can execute SQL queries directly on the underlying Postgres database server. The\\n          queries are executed as the \\\"postgres\\\" user which has full privileges and thus is able to\\n          write files to disk. This way a JSP payload can be uploaded and executed with SYSTEM\\n          privileges on the web server. This module has been tested successfully on ManageEngine\\n          EventLog Analyzer 10.0 (build 10003) over Windows 7 SP1.\", \"disclosure_date\": \"2015-07-11\", \"fullname\": \"exploit/windows/misc/manageengine_eventlog_analyzer_rce\", \"is_install_path\": true, \"mod_time\": \"2026-04-22 11:58:58 +0000\", \"name\": \"ManageEngine EventLog Analyzer Remote Code Execution\", \"needs_cleanup\": true, \"notes\": {\"Reliability\": [\"unknown-reliability\"], \"SideEffects\": [\"unknown-side-effects\"], \"Stability\": [\"unknown-stability\"]}, \"path\": \"/modules/exploits/windows/misc/manageengine_eventlog_analyzer_rce.rb\", \"platform\": \"Windows\", \"post_auth\": true, \"rank\": 0, \"ref_name\": \"windows/misc/manageengine_eventlog_analyzer_rce\", \"references\": [\"EDB-38173\", \"CVE-2015-7387\", \"URL-https://seclists.org/fulldisclosure/2015/Sep/59\"], \"rport\": 8400, \"session_types\": false, \"targets\": [\"ManageEngine EventLog Analyzer 10.0 (build 10003) / Windows 7 SP1\"], \"type\": \"exploit\"}", "creation_timestamp": "2026-09-08T06:52:20.309185Z"}]}